StackRadar

CVE-2024-9042

Medium

Advisory

Published 13 Mar 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
217
of 17,781 indexed, latest versions
Container images
192
deployed by those charts
Fix available
1 of 1
affected package

Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API

Carried by container images the latest versions of 217 of 17,781 indexed charts deploy, on 192 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+99 more1.29.13, 1.30.9, 1.31.5192
OSV records
GHSA-vv39-3w5q-974q
Also known as
GO-2025-3522

Charts affected

217 by stars
ChartLatestAffected imagesRadar Score
kyvernosoftonic3.5.21 of 7See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.29.13

Open the chart page →

1,019
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.29.13

Open the chart page →

3,257
spire-identity-exchangespiffeVerified publisher0.2.21 of 3See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.13

Open the chart page →

1,427
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
k8s.io/kubernetes@v1.30.1
1.30.9

Open the chart page →

2,416
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.29.13

Open the chart page →

16,506
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
1.29.13

Open the chart page →

2,671
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
1.29.13

Open the chart page →

2,902
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
1.29.13

Open the chart page →

8,607
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
1.29.13

Open the chart page →

4,525
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.13

Open the chart page →

1,122
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
k8s.io/kubernetes@v1.30.3
1.30.9

Open the chart page →

10,843
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
1.29.13

Open the chart page →

15,230
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.29.13

Open the chart page →

2,743
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.29.13

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.29.13

Open the chart page →

11,784
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.29.13

Open the chart page →

12,606
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-9042.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.29.13

Open the chart page →

13,677

Container images carrying it

192 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
k8s.io/kubernetes@v1.16.2
1.29.13
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
k8s.io/kubernetes@v1.26.3
1.29.13
1
rancher/hardened-calico:v3.13.36d2cd61a338b
k8s.io/kubernetes@v1.16.2
1.29.13
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
k8s.io/kubernetes@v1.16.2
1.29.13
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
1.29.13
1
rancher/kubectl:v1.25.085a0d1148784
k8s.io/kubernetes@v1.25.0
1.29.13
1
ryuunosukeds3/orbital:latest0879f7261b10
k8s.io/kubernetes@v1.31.0
1.31.5
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
k8s.io/kubernetes@v1.25.5
1.29.13
1
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
k8s.io/kubernetes@v1.29.2
1.29.13
1
sikalabs/slu:v0.72.07bd267f30247
k8s.io/kubernetes@v1.24.14
1.29.13
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
k8s.io/kubernetes@v0.0.0-20240814185733-a51b3b711150
1.29.13
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
1.29.13
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.13
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.29.13
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.29.13
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.29.13
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
k8s.io/kubernetes@v1.11.1
1.29.13
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
1.29.13
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
k8s.io/kubernetes@v1.28.2
1.29.13
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
k8s.io/kubernetes@v1.31.0
1.31.5
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
k8s.io/kubernetes@v1.31.0
1.31.5
1
ghcr.io/caninehq/canine:latesta058034ca006
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.13
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
1.29.13
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1
1.29.13
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
k8s.io/kubernetes@v1.25.16
1.29.13
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
k8s.io/kubernetes@v1.29.0
1.29.13
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
k8s.io/kubernetes@v1.30.3
1.30.9
1
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
k8s.io/kubernetes@v1.25.6
1.29.13
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5
1.29.13
1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
k8s.io/kubernetes@v0.0.0-20250311174105-0d0f172cdf9f
1.29.13
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
k8s.io/kubernetes@v1.27.3
1.29.13
1
ghcr.io/k10app/businit:latest94c9a3e799c2
k8s.io/kubernetes@v1.25.4
1.29.13
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
1.29.13
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
k8s.io/kubernetes@v1.29.3
1.29.13
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
k8s.io/kubernetes@v1.25.13
1.29.13
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.29.13
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
k8s.io/kubernetes@v1.29.2
1.29.13
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.29.13
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
k8s.io/kubernetes@v1.29.0
1.29.13
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
k8s.io/kubernetes@v1.25.3
1.29.13
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
k8s.io/kubernetes@v1.14.10
1.29.13
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
k8s.io/kubernetes@v1.20.4
1.29.13
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/kubernetes@v1.16.10
1.29.13
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
k8s.io/kubernetes@v1.29.2
1.29.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.